Nsec.app will let you sign for an account an it encrypts the nsec locally on device but stores an encrypted ncryptsec in the cloud for remote signing (bunker) functionality. You can then use something like the nip-49 offline decryptor that I made if you ever need to retrieve the nsec

NIP-49 — Offline Decrypt (Self-contained)